skysight-inc/HackerNews huggingface dataset:
I think NextCloud and OwnCloud are also bad examples, as in the beginning they started with the clear goal to replace Dropbox with a selfhosted alternative. Only later in live they become what they are now, so the original point still stands.
I work adjacent to CPU verification, and let me tell you, those verification guys do file a LOT of bugs (and thus make a lot of work debugging and fixing issues). Some days I do wish we could just get rid of them, surprised that Intel really went ahead and did it.
As someone who used to be a huge Thinkpad fan/user, the Thinkpad brand is dead.

I liked Thinkpads because of trackpoint, linux support, quality builds. 2/3 of those are gone. Linux support is still there, but even the higher end builds have shotty quality at this point. I wanted a quality tool to do quality work.

I switched to mac with the arm conversion. Quality builds with Unix support. Once Aasahi is fully functional, the world will be complete.
Not exactly what you asked, but I use TortoiseGit and Git Cola 99% of the time and the CLI only for weird stuff (after making a back up branch).
A couple of years ago I learned it is possible to create glucose directly from solar power. The estimates from the authors of the paper were that earth could feed 1 trillion ppl this way.
They have their own fleet of planes for shipping.

Amazon’s vertical integration is their mote.
>But even with Apple, I can't sync stuff between my personal and work computer because they use different Apple IDs

You can't save your personal passkeys on your work phone and vice versa, but when logging in to a service on one device, you should be able use a passkey from the other device via Bluetooth by scanning a QR code.
Too much generally refers specifically to inpatient beds.
To have the best of all worlds:

- your own blog on a domain you control

- effortless crossposting to bluesky, mastodon, threads, linkedin, and others

Then micro.blog is a great solution!

It follows the POSSE principle: Publish on your Own Site, Syndicate Elsewhere.

see: https://micro.blog/about/crosspost
Im not sure a gas station analogy really works. I use a gas station out of convenience (i.e. its on my route) and will only go out of my way for a significant difference in price. This means i go to the same gas stations even when there are others that are “as good as” around just because it’s convenient for me. Similarly if i already setup an account with Amazon and currently use Amazon i won’t move to an “as good as” competitor just because its an inconvenience to setup a new account, add billing info, add my address, etc… for no real improvement.
>No malicious intent this time

it must be 1984 because otherwise collecting centimeter precise location data of vehicles would definitely be malicious....
> That is not how these things work. The general public can only call for a investigation

Sure, anybody can ask anybody else to investigate anything, but also anybody can investigate anything themselves. Of course, not everybody might have full access to everything, but access is earned by presenting convincing evidence thusfar. If you discover any evidence that openAI killed this person, it can be forwarded to authorities, who can use it to justify a more extensive investigation of their own, with subpoenas, etc.

Otherwise, we can expect a normal amount of investigation, like into any other apparent suicide.

> What you call a contrived description is in fact what is sometimes called a modus operandus, signature, or staging

What you previously called evidence, and now only call a modus operandus, signature, or staging, is in fact a contrived, self-serving, narrative description (one which you might have had even before this person passed away). I find that disparaging someone's reasonable skepticism here, is toxic to discourse.

Evidence is something like: Sally saw someone shoot the dude; we found an email from saltman ordering the hit; a video caught the whole murder on tape. Have you seen any actual evidence? I haven't. Only contrived, conspiratorial, self-serving narrative descriptions. Evidence warrants investigations, narratives about hypothetical motives don't.

> they were silenced

The 1 person we're discussing, evidently seems to have taken their own life, rather than being "silenced". It's tragic, but please don't exploit their memory for your own agenda with such unfounded, conspiratorial assertions. Prefix such assertions with "I personally believe...", and if so desired, "...based on no direct evidence thusfar...".
You can check your email, everything will show up fine (or at least what you think is everything).. that doesn't mean there's not some problem with email delivery that you don't know about.

To reply to something you said in your first comment, as someone with over a decade of experience it is my place to share my thoughts about this subject. If you want to ignore my thoughts go ahead, I could care less.. but I don't appreciate how you're acting like I'm doing something wrong.
> The bigger issue is that no OS was designed for expansive and flexible async functionality.

The NT kernel was designed in this very way. All I/O in the NT kernel is async. It was one of the design principles.
Many cloud native companies have realized they his and are actually moving off of public clouds.

It’s slow and painful, but the expense is driving some customers away.
This is highly dependent on what particular professional niche you're in.

Hollywood actors are now routinely cast (in part) based on how many social media followers they have, leading to a lot of weirdness around their agents and agencies buying followers, accusing other competing actors of buying followers, etc.

A bit closer to the HN crowd, there is definitely a correlation between speaking at conferences and having an "audience" and being a well-known figure online.

Similarly, the "build-in-public" indie folks are active on social trying to break the build it and they will come cycle.

There are ways to participate and filter through the noise that are positive, but certainly a lot of negative as well.
They'd rather have dumbphones than brain rot
I certainly hope it works because rebalancing the world away from X is a win for the world.

I'm not sure we have much precedent for that model working to sustain any form of social media for the masses. It has in my experience been great for specific services (happily paying for pinboard on a yearly subscription!) but I'm not sure it will work for aby service aspiring to be a universal town square.
re: EU central registry of assets, here is a Bloomberg Law piece from July 2024, detailing the chairman of the EU parliament's tax subcommittee's desire to get a "European registry of assets". it seems fairly straight forward.

[1] https://myconvergence.bna.com/ContentItem/ArticlePublic/2620...

edited to fix link
Can't say, but there are plenty of people hating "the feds" in many regions.

Any funny enough, they still want to keep the parts that the Eurosceptics are fighting tooth and nail from being enacted :)
Yeah, it's not the first time they have sound problems. Really frustrating, especially for non-native speakers.

I was going to blame wireless mics, but they seem to be fixed?..
I have stayed away from it for a while, but after my partner switched over to it I decided to delve deeper into it. The openess of Bluesky to developers is a breath of fresh air and the platform itself has some really great features. So I guess you can say I'm a fan now too.

I was also able to create an app on Bluesky that grew to 15k users in less than a month[1]. The Bluesky team was really open to helping me with some rate limits to make sure it could continue running well too. Reddit and Twitter probably had similar vibes when they were starting out, perhaps Bluesky will face the same fate, but there are no guarantees with any platform out there.

1 - https://listifications.app
Impressive compression rate.

Related project: https://bellard.org/nncp/ and https://bellard.org/nncp/nncp_v2.1.pdf
If any one wants to read more about how it's implemented.
> We're kind of already seeing this, for example Texas and Florida shipping their illegals into Massachusetts and NY

Which is a game-theoretically sound choice given the lack of legal authority to prevent unlawful entry to begin with.
Given the assumption that climate change would kill literally everyone, I would agree.

But also: I think it extremely unlikely for climate change to do that, even if extreme enough to lead to socioeconomic collapse and a maximal nuclear war.

Also also, I think there are plenty of "not literally everyone" risks from AI that will prevent us from getting to the "really literally everyone" scenarios.

So I kinda agree with you anyway — the doomers thinking I'm unreasonably optimistic, e/acc types think I'm unreasonably pessimistic.
>In some parallel universe, each computing device manufacturer is required by law to provide a storage so that the user can plug in their single, universal, transferrable set of security credentials (like passkeys). Instead of "many cooks" mentioned in the article, there is one standard.

Ignoring site support, this exists. It's called USB and yubikey.
Blue Sky hasn't done an IPO.
Since one of Zig's goal is to work alongside C, it makes sense to use the same terminology and to invent new ones that a C programmer could make sense of. I tried to learn rust at the beginning of the language and had a hard time trying to map my C knowledge onto Rust.
Where Have All the Managers Gone?
Gift link: https://www.wsj.com/lifestyle/careers/management-jobs-shrink...
You think that kind of solution is understandable for an average user, like an uncle who has little computer knowledge?
What is the use case? If you have to read data from one specific website which uses handshake info to avoid being read by software?

When I have to do HTTP requests these days, I default to a headless browser right away, because that seems to be the best bet. Even then, some website are not readable because they use captchas and whatnot.
Most passkey stores refuse to let you export them, and the real reason is vendor lockin. (They also did this with TOTP keys.)

Bitwarden is one of the few that don’t - you can export passkeys, although for now, there’s nothing to import them to unless you want to run a roll your own open source solution.
And I would have no idea how to calibrate it.

If it produces an EXR with clearly seperate images with different lenses, fine. Like a 3D EXR with left and right.
We have built a RAG calculator that, given a specific model and PDF format, can estimate the embedding and vector database costs. Additionally, it allows for visualizing the results of chunking. We’d love to hear your feedback on how we can simplify your RAG development process. Stay tuned as we continue to add more visualization tools!
The ability for EU common bodies to command the new army to defend their other members without being subjected to divide/conquer tactics from US, RU and CN.
At least in the US, a nurse has personal liability for a mistake.

A hallucination could not just be career/license ending but land the nurse in jail.

Even with 100% accuracy, is not entirely obvious to me how a nurse could leverage a language model to make their job that much easier.

A language model is not going to bath or dress someone.
> The garbage collection is the important part, it’s hard to make it work and be fast and be safe because its fundamentally a problem that doesn’t play nicely with the borrow checker.

That's fair, use the right tool for the right problem. For most applications you can just use a garbage collected language after all.
Honest question, this isn't supposed to be a burn in any sense. But isn't it contradictory to want to know how and where your credentials are stored and use any credential management solution that isn't opensource and selfhosteable?
It's the Most Indispensable Machine in the World–and It Depends on This Woman
Definitely. However, for the purpose of using it for cocktails I've read around and a lot of people don't perceive and difference
Most people don't care about quality
IMO there is only a B2B market for this kind of thing.

I’ve heard of a few very large companies using glean (https://www.glean.com/)

This is the route I’d take if I wanted to make a business around rag.
> The chance of a hash colliding is near 0%

Until someone finds a successful collision attack.

> Even so a human is in the loop to review what got a hit.

Until shareholder/growth pressure causes them to replace that human with an AI.
Two options I’ve seen:

Customer Managed Keys - You have everything encrypted in your database via a key the customer has. You request (likely automated) that key every time you process the data. They can revoke at any point, and have an audit log of every access.

Self Hosting - Let the customer host your solution themselves or automate spinning up a cloud environment for them that they have full control over.

Both are kind of a pain to implement, but that lets you charge more for these enterprise features.
Since the NT kernel is async throughout, it solves this with periodic priority boosts for non-running but runnable threads.

I swear, the kernel designers just need to look at NT :-P But we're well beyond a complete rewrite of old kernels, sadly.
When does your brain think something is worth the wait?
Daytona (Open Source CDE) – 2024 Development and Growth
This is the most important point IMHO. There is no rational argument that someone is voluntarily signing up to some consumer-hostile behaviour by choosing to make a purchase if (a) every supplier in the market is playing the same game and (b) it is difficult to function as a normal member of society without buying that type of product from someone. Smartphones are a textbook example of this. For many people so are cars and TVs. General purpose computing is in danger of going the same way. Don't get me started on so-called smart homes.

Call it a failure of the free market and competition to provide effective alternatives. Call it a lack of oversight and regulation from governments that increasingly back businesses and economic figures over protecting their own people. It doesn't really matter. Until there is clear law that says selling products to people that will actively act against the interests of the purchaser must at least be prominently disclosed before purchase and probably in the more serious cases simply be banned by law the enshittification will continue because it makes the decision-makers a lot of money.
I think it makes a lot more sense that there's a lot of (especially rich people and US folks) that desperately want EU to fail - either because they're deeply nationalist, see a profit motive or just hate foreigners.

Those will craft narratives that are patently untrue to drive their agenda.
I don't think that was a specific repudiation of that model in particular, I think there's a bit more of a fundamental strategic misunderstanding from the people trying to make Mixer into a thing.

To the extent that bringing big streamers onto the platform had an impact, it was a positive one I would say. But even with them there was too much inertia.
Apple shouldn't be allowed to lock down APIs between system components to give themselves a competitive advantage, but that doesn't mean Meta should be allowed decide if they're getting that access. Let Apple offer users the option: allow once, allow permanently, refuse, or fake empty responses without telling the app.
That requires the area around rail stations to be built for pedestrians and bicycles, not cars. That doesn’t seem to be the case in many places in America.
You've never heard of parents overreacting to news that their daughter has had a consensual sexual relationship with someone?

I'm not sure if I envy or pity whatever kind of sheltered life you've lived.
Yes, absolutely (though Apple does not actually ship anything overnight). In fact when I worked on Android one of the frustrations I ran into was the slow pace to roll out security improvements. While Pixel phones get fixes quickly enough the majority of the world is not actually on Pixel devices, so if you want to ship changes you need to get OEMs on board, and then also have users on devices that are still being supported. A lot of the people we covered would simply not get any improvements until they literally bought a new device, in areas of the world with some of the longest lifecycles for those devices.
>The Client Hello message that most HTTP clients and libraries produce differs drastically from that of a real browser.

Why is this?
> all the cultures that had celebrations or holidays around this time of the year

I expect this not to be true... Cultures with only a moon calendar (ancient Arabs) do not even have the means to express the date!
Quite difficult on production devices
> What is the use case? If you have to read data from one specific website which uses handshake info to avoid being read by software?

Evade captchas. curl user agent / heuristics are blocked by many sites these days - I'd guess many popular CDNs have pre-defined "block bots" stuff that blocks everything automated that is not a well-known search engine indexer.
> With Apple's keychain, and I suspect other companies' solutions, passkeys are connected to your account

And from this account you may be locked out for various reasons anytime, as it happened to countless persons previously, violating exotic or even understandable rules, or just been in the crossfire of some galactic corporate incompetence (some f'd up), but this way you'd be locking yourself out of everything especially if you were that user in the vacuum, exposing yourself to the mercy of a single organization with changing managemenet and incentives as the wind turns in a city's dense downtown.
AR glasses and the return of the glass-hole. Even less privacy.
>So maybe transportable content standards is the most important thing to solve?

Right, and I would suggest this is what the activitypub protocol is for.
Well the rate of new LLMs keep coming out, but since they’re all trying to model language, they should all be fairly interchangeable and potentially will converge.

It’s not hard for a product to swap the underlying LLM for a given task.
I will never use Face ID or Fingerprint for any device, but I agree, passkeys are a bit too much. Also, the OSs I use may not support passkeys. They are not on the list.
> Most passkey stores refuse to let you export them, and the real reason is vendor lockin. (They also did this with TOTP keys.)

Does this mean that any HSM where inability to export the private key is a feature is also doing it for "vendor lockin" reasons?
While I agree with many of the points raised by the author, I guess I just had much much more pessimistic expectations than they did. If I were to write an article on the topic, I'd probably end up listing the exact same factual information, but with the opposite spin: "This is progressing much quicker and more smooth than I would have anticipated!"

Switching from passwords to passkeys is a big change in the entire security model of the modern user-facing internet. We shouldn't be at all surprised that people are both cautious and opinionated about how it should be done, how to migrate users, and how to deal with fallbacks.

Yes, the current situation is one that is messy and not significantly more secure than the previous status quo, but the direction of travel seems at least promising.

I wouldn't actually want my bank to overnight decide that passkeys are the way to log in, and if I use a passkey there should be no insecure fallback options. I want my bank to roll out a passkey, and figure out the infrastructure around it, probe for problems, and allow fallbacks that are equivalent to their previous systems. Similarly, I wouldn't want every passkey management implementation to instantly coalesce around one specific set of management practices and UX. I want various ideas to be tried out and see what comes out of it, even if some of those experiments are bad.
Problem with "Peristice" is that the Solstice comes a couple of weeks before the Perihelion, so it "should" be in the order:

Solstice -> Perihelion.

Also, "Peristice" is a bit close (for me) to "Peristalsis" ...
Gift link: https://www.wsj.com/tech/ai/asml-euv-machine-lithography-chi...
Maybe, but I haven't pushed very hard for it as I don't use OOP very often. I did buy Art of the Metaobject Protocol in case I wanted to try to make some of the improvements myself, but haven't gotten around to it.
Apart from syntax sugar over which I agree should be improved, the argument sells to boil down to: my language doesn't enforce a borrow checker so it is UB safe. Which in my book is just not true.

The allocator example the user gives is not really good since if he had another try in between the alloc/free I assume the memory would not be freed, Drop semantic is better in that regard. You can also set a global alloc that check for missing free in rust though probably not as nice as a localized one.
Someone should adjust prices for interest rates..
No one's talking about "anonymous usage data". The topic at question is primary data available to first party apps (even if they remain on device), often synced to iCloud and available to say, Siri. I'm sure I accepted a bunch of EULAs when turning on iCloud and Siri, but Facebook will argue they've shown you their EULA too. That's not "request permissions the same way third party apps do", and some of the data can't even be requested through normal permission prompts, which is why Meta is forcing Apple's hand with the EU stuff.
"Serling spent his entire career trying to reconcile the tendency of man to turn against their fellow man"

Wish someone like Serling could have written "The Purge". Seems like it was good idea, that didn't get executed well.
Lots of criticism in the article, some of it valid, none of it constructive.

Sure, there's UX problems as we're still trying to figure out what good looks like here. But in the absence of specific, concrete suggestions about how we improve usability for unphishable credentials, it seems that passkeys are a pretty good go. Perfect? No. Better than passwords? Undoubtedly.
Fair enough, but I believe there is a spectrum between "I don't want to know things, let them just work" and "self-host and manage an application for storing the most sensitive type of information".

1Password is neither opensource nor self-hostable, and it stores data in the proprietary cloud (at least exports are easy). But I understand that and accept it.

If I get a Macbook, an Android phone, and a Windows PC (a very popular combination of devices, btw), I honestly don't have energy to investigate how to inter-operate their passkey solutions. From the get go, I assume it's gonna be either impossible, or very hacky and fragile. Maybe I'm wrong, but last time I checked I simply walked away thinking "nope, no passkeys for me".
I had a record scratch moment at that point in the article also. For one I'm not so sure that the masses are going through server by server looking up content polices with a microscope. They're just signing up and posting.

For those who need them, they are accessible enough, and in fact I think it was the population looking for those that was effectively the first movers onto Mastodon.
Meanwhile the strongest federation on Earth somehow manages without allowing Texas and Wyoming their own dollars and currency manipuliation. Funny that.
True, but the systems that do this most effectively require a lot of other limited resources besides solar power - most notably arable soil, fresh water, time, and usually also some additional processing to render that glucose ingestible for one of those people.

So maybe the Earth could supply 1 trillion people with food if it was turned into a farm planet devoid of any other biodiversity but those required to support human life, assuming those 1 trillion people were living and doing all their non-agricultural industry somewhere else.